HTCIA Asia Pacific Chapter is pleased to announce that the half day workshop on WiFi and Bluetooth hacking techniques and investigative approaches will go ahead on the coming Saturday morning, details as follows:

Topic: "WiFi and Bluetooth Hacking & Investigation"

(a) WLAN basis; what is war driving; past war driving report statistics; how to conduct - equipment/tools;  demo of NetStumbler & Kismet with hands-on practice

(b) Explaining open & WEP network; threats & countermeasure; bluescanning with hands-on practice

(c) WEP crack; blue-hacking (to mobile phone); basis; threats & countermeasure, etc.

Date/Time: Saturday 26th July 2008 (0930-1230)

Venue: Police HQ, Arsenal Street, Wanchai

Registration: By e-mail to events(at)htcia.org.hk - HTCIA members only (free of charge). Details of access to venue will be sent back by e-mail upon registration

Presenters: The presenters are the highly experienced Mr. Alan Ho, Anthony Lai & San Young from PISA

This is a great opportunity to learn more about the latest threats to WiFi and mobile device security in a hands on environment. Computers will be provided, but attendees are recommended to bring a WiFi and Bluetooth USB dongle to get maximum benefit.

HTCIA Asia Pacific Chapter is pleased to announce a forthcoming evening presentation with details as follows:

• Date/Time:   Tuesday 24th June 2008 (7PM to 8PM)
• Venue:          Microsoft Office, 23/F, Pacific Place III, Wanchai (near Admiralty MTR)
• Presenter:    Mr. Paul Jackson
• Topic:           USB Thumbdrives (The Good the Bad and the Ugly) - Paul will discuss use of USB thumbdrives as investigation and forensics tools as well as some of the current threats caused by using such devices.
• Attendance: This event is free of charge for HTCIA members & guests. Please indicate if you will attend by sending a brief e-mail to events (at) htcia.org.hk

 Don't forget to subscribe to the low-volume mailing list (non-members can also subscribe) to receive early news about coming events!! Joining is simple and open to all - click here to join

Our thanks go out to Mr. Syed Minhaj, Senior Manager of Information Assurance with Hill & Associates Ltd. for providing a very interesting and topical presentation to our members recently.

He has kindly provided us with his powerpoint which can be downloaded by clicking here

The Hong Kong Information Security and Forensics Society (ISFS) are organising a very topical Seminar with the theme: Case Study – Forensic Examination of Internet Porn Images

The event will take place on Saturday 29th March 2008, and HTCIA members are invited to attend free of charge. For further details, please refer to the "Events" page.

The HTCIA Asia Pacific Chapter is pleased to announce an evening presentation on Thursday 20th March on the topical subject of large scale computer forensic collections.

Syed Minhaj, Vice President, Forensic Services Practice from Hill and Associates will share his recent experiences dealing with a complex investigation and the lessons learned. Presentation details as follows:

Collecting Companies: Planning and Conducting a Large Scale Acquisitions

There have been recent and rapid changes in the international landscape concerning digital evidence. The amended US federal rules of civil procedure have had enormous effect; now all matters, civil or criminal, are being held to high digital evidentiary standards. This impacts the work of internal and external counsel, corporate investigators, and forensic consultants. Syed Minhaj will give an overview of these changes, and how this has resulted in the need for large scale collection. He will then deal with tips and tactics for planning and tracking these types of project.

Date: Thursday 20th March 2008
Time: 1830 Hrs
Venue: Police Officer's Club, 8, Hung Hin Road, Causeway Bay (next to Noonday Gun)

There will also be an opportunity for some networking afterwards in the Police Officer's Club Verandah Bar with cheap food and drink (cash bar).

The event is free of charge to all HTCIA members and guests.

PISA is organising a fantastic event at the HK Cyberport on 23rd February 2008! We are all aware of how the HK (and many other) Govt. is rolling out free WiFi in many areas of the city. Also industries and other organisations are increasingly utilising wireless technology infrastructures.

This event is designed to raise awareness of the current security issues, and will also explain and demonstrate the latest attack technologies that users need to be aware of.

In addition, the event is free of charge and there is free transport to the Cyberport - please see the link for further details and don't  miss out on this unique opportunity!

HTCIA Asia Pacific Chapter is pleased to announce another excellent training opportunity. Details as follows:

• Topic: Penetration Testing and Knowledge Sharing from recent BlackHat/DefCon onferences
• Presenter: Mr. Anthony Lai
• Date/Time: Saturday 13th October 2007 (0900-1230)
• Venue: Police HQ, Arsenal Street, Wanchai

Anthony Lai will present on:

Penetration Testing (Duration: 2 hours)

Currently, most of the corporations focus on "Paper Tiger"-based compliance, reviewing the vulnerabilities with a checklist audit program. From this session, you could learn the basic penetration testing techniques from information gathering, security analysis to exploit so as to uncover the control weaknesses of a system with various tools. We need to learn real-life testing with various demonstrations. 

Blackhat/DefCon Sharing (Duration: 1 hour)

Meanwhile, I have attended the recent Blackhat and DefCon conferences in the USA and I would like to share my experience with you. There will be an hour video time to show the vulnerability of forensic software. You always trust the forensic software to capture the evidence for you, however, do you know hackers could fool that software and cannot capture relevant traces?

About the Presenter:

Anthony Lai has hybrid IT experience in corporate system development and security consultancy as well as audit experience. He currently is a regional senior risk consultant on both corporate and information risk management in a leading european financial institute. His major intersts are penetration test, web application security assessment and fraud/crime investigation.

He is a voluntary speaker in (ISC)2, Chapter Leader of The Open Web Application Security Project (HK Chapter) (www.owasp.org/local/hongkong.html), Founder & Editor of InfoSec Hong Kong ( www.infosechk.org) and member in HTCIA (High Technology Crime and Investigation Association) (Asia Pacific Chapter)

For registration, please send an e-mail to workshop(at)htcia.org.hk with your:

• name,
• contact phone number and
• membership number.

This is a HTCIA members only event and seats at the venue are strictly limited. The fee is HK$150- payable at the door upon successful registration. After registering, you will receive an e-mail with logistical information.

Now that Summer is over, the HTCIA Asia Pacific Chapter is hard at work bringing you a new series of events.

The highlight of which will be the 1st HTCIA Asia Pacific Training Conference scheduled for 12-14 December 2007. Things are moving fast and announcements on the agenda and registration will be coming very soon. To ensure you're kept up to date, please sign up for our mailing list and keep checking the website at http://2007.htcia.org.hk.

On Monday 17th September, we will have an informal evening meeting at the Microsoft Office on 23/F at Pacific Place III starting at 6:30 PM. Come along to listen to Richard Kershaw present about the new tools and techniques on display at the recent HTCIA International Conference in San Diego. He may also be offering disks of content brought back from the Conference! We will also be unveiling forthe first time a sneak preview into what will be happening in our first ever regional conference in December. Lastly, we will be accepting nominations for election at our forthcoming AGM. Plase make every effort to come along and take the opportunity for networking in the pleasant environment (with free coffee) that Microsoft kindly provides us.

Next month, we will have a workshop on Web Application and Google hacking by security expert Anthony Lai and in November, reknowned local forensics expert Ricci Ieong will also be making a presentation on brand new developments in the forensics world. Details will be published nearer the time.

Finally, please make sure that you keep your diary clear for November 5th... we will be holding our second AGM, and this year is an important election year. Please show your support by attending!!

It was a great pleasure to see good turnouts for the two recent events - especially as they were put on at such short notice. Those who came along enjoyed excellent presentations from Mr. Peter Mercer and Mr. Marko Kostyrko.

Peter showed us the value of using the FBI forensics tool (particularly in e-mail related investigations) from an end users perspective (http://www.nuix.com). Marko is the CEO and brains behind MacForensicLab Software and the LE only tool MacLockPick (http://www.subrosasoft.com). He also showed us the value of his tools from an end user perspective, highlighting the areas where the tools have significant strengths. The common theme for both presentations as a forensic examiner was the need to have multiple tools available to be able to function effectively.

Below, Marko delivers his presentation in the impressive Microsoft HK facilities, and below that, he is seen receiving a token of appreciation from HTCIA Asia Pacific President Alan Jeffries:

These will be the last events until after the summer holidays. We will be back with more workshops and evening events in September. Also, keep your eyes on the site for announcements about the exciting conference that we are planning for 12-14 December. This will be a major event with some great speakers lined up. More details will be published throughout the summer!

This Thursday evening, we are delighted to welcome the authors of the impressive MacForensicsLab software & the MacLockPick forensic  incident response tool for Mac systems to Hong Kong.

They will be giving us a presentation on the emerging field of Mac forensics and the capabilities of their tools. This is an excellent opportunity to see some new tools demonstrated by the actual developers.

Details are:

• Date:    Thursday 5th July 2007
• Time:     1830 - 2000 Hrs
• Venue:   Microsoft Office Conference Room, 23/F, Pacific Place III, Wanchai
• Cost:     Free of charge to HTCIA members and our friends at HKCS, PISA, ISFS & ACFE

Please come along and take advantage of this rare opportunity, plus a chance for some good networking.

Please visit the website of SubRosa Soft for more information - http://www.macforensicslab.com/index.html

The HTCIA Asia Pacific Chapter is pleased to welcome to HK, the developers of the Fact Based Investigation (FBI) Tool used primarily for E-mail forensic analysis.

This is a fairly new tool on the market and has already assumed a role as market leader for the critical process of e-mail analysis. This evening presentation will discuss techniques for more efficient forensic work in connecting e-mail communications through an effective link-chart methodology. Of particular note is the fact that it efficiently handles unicode language sets.

Details of the evening talk are as follows:

Date:      Friday 29th June 2007 start at 1830 Hrs.
Venue:    Police Officer's Club, Causeway Bay
Cost:       Free for members and our friends at HKCS, PISA, ISFS & ACFE
Benefits: Cheapest bar in HK and a good networking opportunity!

This is a great opportunity to learn a new technology directly from the developers. If you are interested in attending, please let us know via committee @htcia.org.hk (remove the space) to give us an idea on numbers

The HTCIA Asia Pacific Chapter is pleased to announce another training opportunity. A full day hands-on workshop will be held together with the HK Computer Society on Saturday 5th May 2007. Mr. Paul Jackson will conduct the workshop entitled "Effective Online Investigations". Full details as follows:

• Date: Saturday 5th May 2007
• Time: 0900 to 1700
• Venue: Vocational Training Council, Rm. 901 VTC Tower, 27, Wood Road, Wanchai, HK
• Cost: HK$450 (for HTCIA members)

For bookings, please fax the reservation form as soon as possible to the HKCS - seats are restricted to 30 places, so it is highly recommended to book early. Click the image above to download the booking form.

HTCIA Asia Pacific Chapter is proud to announce a forthcoming Training Workshop on "Latest developments in Spyware technology and Spyware analysis & reverse engineering".

We will be flying in two leading experts in this field from Taiwan. Birdman (see a reference to his past here) and PK have both spoken at major Black Hat conferences and will share cutting edge information which cannot be found via other sources.

For more information and a registration form, please download the flyer by clicking here

• Date:       Saturday 8th July 2006 (1400 - 1800 Hrs)
• Venue:     HKCU SCOPE Computer Lab, 8/F, Admiralty Centre
• Title:        EnCase Certified Examiner (EnCE) Preparation Workshop
• Speaker:  Mr. Frank Butler, Director of Business Development (Training), Guidance Software

• 10th April 2006 - Mr. Hayson Tse, HK DoJ
  • Hayson is an extremely well respected IT Crime Legal expert in the HK Department of Justice. In the first of his two talks to the association, Hayson provided a well researched personal analysis of the HK laws relating to IT crime. His talk stimulated a great deal of debate when discussing loopholes and grey areas in the law and proved to be extremely thought provoking. The presentation can be downloaded from the legal tutorials part of this site.
    

    Hayson's contribution appreciated by Chapter President Alan Jeffries

    
    
    
• 7th November 2005 - Mr. David Rhoades, Maven Security
  
  • David is a well known IT security expert focussing on penetration testing and security assessments. His presentation covered "Web Application Hacking" and "Latest Hacking Tools and Techniques". The presentations can be downloaded from his website at http://www.mavensecurity.com/presentations
    

    David Rhoades during his informative presentation

    
    
    
• October 2005 - Mr. Anthony Fung, Microsoft Corp.
  • Anthony had the honour of delivering the first ever talk for the HTCIA Asia Pacific Chapter at the Police Officer's Club in Causeway Bay. His topics included Rainbow Tables used in Password Cracking and some new hacking techniques.